Try our new research platform with insights from 80,000+ expert users
Splunk Enterprise Security Logo

Splunk Enterprise Security pros and cons

Vendor: Splunk
4.2 out of 5
Badge Ranked 1
9,806 followers
Start review

Pros & Cons summary

Splunk Enterprise Security excels in fast search and data visualization, facilitating informed decisions with strong data correlation across systems for threat detection. Its scalability suits cloud and on-premises environments, processing large data volumes effectively. Strong log management handles structured and unstructured data. Despite high pricing and a complex setup involving a steep learning curve, it remains a valuable tool for integrating multiple data sources, though support and resource efficiency could improve.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Splunk Enterprise Security offers exceptional speed in search capabilities, facilitating rapid access to insights from vast datasets.
It excels in aggregating and correlating different data types, allowing users to build custom visualizations and dashboards.
The responsiveness and extensibility of Splunk Enterprise Security enable users to address security threats and operational issues efficiently.
Splunk Enterprise Security provides comprehensive threat detection and alert systems that enhance the security posture of organizations.
Its ability to integrate seamlessly with diverse systems ensures broad applicability and utility across various IT environments.

CONS

Splunk Enterprise Security's licensing model is considered expensive and could benefit from more flexibility and cost-effective options.
The integration with third-party services and cloud products requires improvement to enhance interoperability and ease of setup.
Many users report a high learning curve, indicating that Splunk Enterprise Security is not particularly user-friendly, making training and onboarding challenging.
Users frequently encounter issues with managing and scaling large data sets, leading to performance concerns, especially when processing high volumes of data.
There are complaints regarding the effectiveness and responsiveness of technical support, with some users experiencing delays in getting their issues resolved.
 

Splunk Enterprise Security Pros review quotes

Rishabh Gandhi - PeerSpot reviewer
Sep 6, 2023
Our clients use the solution to find any threats or vulnerabilities inside their environment.
Read full review
SC
Aug 11, 2023
The most valuable features include agility and Splunk Enterprise Security's ability to quickly search for alerted items, as well as the capacity to create custom alerts using the SQL language employed by Splunk.
Read full review
reviewer953235 - PeerSpot reviewer
Dec 22, 2021
The feature that I have found most valuable with Splunk is the ability to sift through a bunch of data very quickly.
Read full review
Buyer's Guide
Splunk Enterprise Security
February 2025
Free Report: Splunk Enterprise Security Reviews and More
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
DOWNLOAD NOW
841,164 professionals have used our research since 2012.
reviewer2309169 - PeerSpot reviewer
Nov 13, 2023
The best part of Splunk Enterprise Security is its customizable settings.
Read full review
reviewer2499732 - PeerSpot reviewer
Jun 13, 2024
It is lovely to have everything we need in one tool. Everything is quite centralized.
Read full review
reviewer2382405 - PeerSpot reviewer
Mar 22, 2024
Splunk Enterprise Security allows us to create custom dashboards by changing fonts and modifying widgets.
Read full review
reviewer2182467 - PeerSpot reviewer
May 11, 2023
The varied prebuilt feature is the most valuable because it ensures that we have complete coverage over all of the key questions.
Read full review
reviewer2499627 - PeerSpot reviewer
Jun 12, 2024
The most valuable feature of Splunk Enterprise Security is the threat intelligence integration because essentially having to go out and correlate all the data on our own becomes convoluted.
Read full review
Daniel Hammons - PeerSpot reviewer
Jun 13, 2024
The incident review pane is the best part of it because that is where the SOC lives. It is the heartbeat of what the SOC needs to do. You are able to start the investigative process. As you are sitting in the incident review pane, you see the alert, and from that one alert, which is called a notable alert, you can drill in and see all the different specific details that are tied to that.
Read full review
Valarie - PeerSpot reviewer
Jun 12, 2024
Being able to aggregate detection and alerts from various sources is valuable. Like everyone else, we have a wide range of tools in our shop. We are able to stop at one spot and look at all the data. All the data is able to come through, and we can then jump from source to source or index to index. We can dig deep whenever we need to and get a good high-level understanding.
Read full review
Show 10 more reviews (out of 282)
 

Splunk Enterprise Security Cons review quotes

Rishabh Gandhi - PeerSpot reviewer
Sep 6, 2023
It would be great if I could have a certain dialogue box in Splunk that uses innovative AI tools like ChatGPT, which are available now in the tech department.
Read full review
SC
Aug 11, 2023
Splunk could enhance its services by providing more comprehensive professional assistance aimed at optimizing our investment.
Read full review
reviewer953235 - PeerSpot reviewer
Dec 22, 2021
Their technical support sucks.
Read full review
Buyer's Guide
Splunk Enterprise Security
February 2025
Free Report: Splunk Enterprise Security Reviews and More
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
DOWNLOAD NOW
841,164 professionals have used our research since 2012.
reviewer2309169 - PeerSpot reviewer
Nov 13, 2023
Splunk Enterprise Security has not helped reduce our alert volume.
Read full review
reviewer2499732 - PeerSpot reviewer
Jun 13, 2024
Splunk Enterprise Security provides us with the relevant context to help guide our investigations, but it would be interesting to add even more context, for instance, in order to raise the level of risk.
Read full review
reviewer2382405 - PeerSpot reviewer
Mar 22, 2024
I've noticed that onboarding data from various multi-cloud sources and diverse products, such as security network devices, can be challenging.
Read full review
reviewer2182467 - PeerSpot reviewer
May 11, 2023
It is important to make sure that everything is built off of the threat models and all the underlying items within Splunk.
Read full review
reviewer2499627 - PeerSpot reviewer
Jun 12, 2024
For us, the area that Splunk Enterprise Security can improve is performance optimization.
Read full review
Daniel Hammons - PeerSpot reviewer
Jun 13, 2024
Being able to have a one-stop shop where you have the alert, but then you can generate the case right there from Splunk Enterprise Security instead of having to pivot to another tool such as Mission Control. You do not have to keep bouncing between them, so if you could do it all in one place, that would be great. The new release is supposed to start getting in that direction.
Read full review
Valarie - PeerSpot reviewer
Jun 12, 2024
The first thing that comes to mind is a little bit of UI improvement. It sometimes can be a little bit buggy or it can be a little bit slow, but that varies from customer to customer.
Read full review
Show 10 more reviews (out of 277)

Product Categories

Product Categories
Security Information and Event Management (SIEM)
Log Management
IT Operations Analytics

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Splunk Enterprise Security Logo
CrowdStrike Falcon vs Splunk Enterprise Security
Wazuh vs Splunk Enterprise Security Logo
Wazuh vs Splunk Enterprise Security
Microsoft Sentinel vs Splunk Enterprise Security Logo
Microsoft Sentinel vs Splunk Enterprise Security
IBM Security QRadar vs Splunk Enterprise Security Logo
IBM Security QRadar vs Splunk Enterprise Security
Elastic Security vs Splunk Enterprise Security Logo
Elastic Security vs Splunk Enterprise Security
LogRhythm SIEM vs Splunk Enterprise Security Logo
LogRhythm SIEM vs Splunk Enterprise Security
Rapid7 InsightIDR vs Splunk Enterprise Security Logo
Rapid7 InsightIDR vs Splunk Enterprise Security
Sumo Logic Security vs Splunk Enterprise Security Logo
Sumo Logic Security vs Splunk Enterprise Security
Fortinet FortiSIEM vs Splunk Enterprise Security Logo
Fortinet FortiSIEM vs Splunk Enterprise Security
Cortex XSIAM vs Splunk Enterprise Security Logo
Cortex XSIAM vs Splunk Enterprise Security
AlienVault OSSIM vs Splunk Enterprise Security Logo
AlienVault OSSIM vs Splunk Enterprise Security
Securonix Next-Gen SIEM vs Splunk Enterprise Security Logo
Securonix Next-Gen SIEM vs Splunk Enterprise Security
Google Chronicle Suite vs Splunk Enterprise Security Logo
Google Chronicle Suite vs Splunk Enterprise Security
Exabeam vs Splunk Enterprise Security Logo
Exabeam vs Splunk Enterprise Security
ManageEngine Log360 vs Splunk Enterprise Security Logo
ManageEngine Log360 vs Splunk Enterprise Security
See all alternatives

Product Categories

Product Categories
Security Information and Event Management (SIEM)
Log Management
IT Operations Analytics

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Splunk Enterprise Security Logo
CrowdStrike Falcon vs Splunk Enterprise Security
Wazuh vs Splunk Enterprise Security Logo
Wazuh vs Splunk Enterprise Security
Microsoft Sentinel vs Splunk Enterprise Security Logo
Microsoft Sentinel vs Splunk Enterprise Security
IBM Security QRadar vs Splunk Enterprise Security Logo
IBM Security QRadar vs Splunk Enterprise Security
Elastic Security vs Splunk Enterprise Security Logo
Elastic Security vs Splunk Enterprise Security
LogRhythm SIEM vs Splunk Enterprise Security Logo
LogRhythm SIEM vs Splunk Enterprise Security
Rapid7 InsightIDR vs Splunk Enterprise Security Logo
Rapid7 InsightIDR vs Splunk Enterprise Security
Sumo Logic Security vs Splunk Enterprise Security Logo
Sumo Logic Security vs Splunk Enterprise Security
Fortinet FortiSIEM vs Splunk Enterprise Security Logo
Fortinet FortiSIEM vs Splunk Enterprise Security
Cortex XSIAM vs Splunk Enterprise Security Logo
Cortex XSIAM vs Splunk Enterprise Security
AlienVault OSSIM vs Splunk Enterprise Security Logo
AlienVault OSSIM vs Splunk Enterprise Security
Securonix Next-Gen SIEM vs Splunk Enterprise Security Logo
Securonix Next-Gen SIEM vs Splunk Enterprise Security
Google Chronicle Suite vs Splunk Enterprise Security Logo
Google Chronicle Suite vs Splunk Enterprise Security
Exabeam vs Splunk Enterprise Security Logo
Exabeam vs Splunk Enterprise Security
ManageEngine Log360 vs Splunk Enterprise Security Logo
ManageEngine Log360 vs Splunk Enterprise Security
See all alternatives
Related questions
  • 5
Which would you recommend to your boss, IBM QRadar or Splunk?
  • 61
What are some of the best features and use-cases of Splunk?
  • 172
What SOC product do you recommend?
  • 12
Splunk as an Enterprise Class monitoring solution -- thoughts?
  • 5,411
What is the biggest difference between Dynatrace and Splunk?
  • 27
IBM QRadar is rated above competitors (McAfee, Splunk, LogRhythm) in Gartner's 2020 Magic Quandrant. Agree/Disagree?
  • 31
What are the advantages of ELK over Splunk?
  • 185
How does Splunk compare with Azure Monitor?
  • 9
New risk scoring framework in the Splunk App for Enterprise Security -- thoughts?
  • 40
Splunk vs. Elastic Stack